ended3월 25일· 1 sources
How I Audit 200+ Dependencies in 5 Minutes (Free Tools Only)
200개 이상의 의존성을 5분 만에 감사하는 방법 (무료 도구만 사용)
Why it matters
After the LiteLLM PyPI compromise, the author built a 5-minute dependency audit workflow using free tools (NVD, OSV.dev, EPSS) to check all transitive dependencies against vulnerability databases. The workflow lists all packages, queries CVE databases, scores exploit probability via EPSS, and generates a prioritized risk report—catching issues that pip audit alone misses.
1
Sources
+0
24h
—
Growth
172d
Active
dependency auditNVDOSV.devEPSSCVEpip audit